[sims] GroupCall Xporter

[MYK-IT]

Hi,

 

Experiencing problems with getting GroupCall Xporter working. Doesn't help that a new Firewall was install over Summer, but after changing various (Proxy, groupcall SIMS username/password) etc. we have progressed further each time, to now this current issue:

 

DD-MMM-YY xx:xx:xx: Meritec-MeritecData: Error in GCX_SendToMeritec The HTTP request was forbidden with client authentication scheme 'Anonymous'.

 

Any thoughts?

 

The GroupCall Xporter service has been (re)configured to 'Log on' as a known domain account etc (for web filtering purposes) and DPI-SLL / Content Filtering (temp) disabled for this server etc, but still no joy.

 

I am thinking it's some (mis)configuration within GroupCall Xporter somewhere????

 

Thanks,

[Steve21]

Did you set the proxy up within xporter? Under misc there's settings for it too

 

We set ours to point to the proxy directly, and then bypass all auth checks on the proxy for the SIMs box etc. No need to set user accounts etc then

 

Steve

[ChrisMiles]

Depending on how your web filter works, what you've done may be no use. If your filter looks at the domain controller for logon events then service logins will override each other and console logins will overwrite that. Basically, your filter can't keep track of who's logged in at that IP.

 

If your filter uses a proxy server, the service may not be using it.

 

Is there any reason you need to apply filtering to the SIMS server? I'd just exclude it.

[MYK-IT]

Hi @Steve21

 

Yes, there were old Proxy Settings we had in there from previous settings. After correcting these, and restarting the service this allowed us to progress further, and the logs do show communication etc (for client update checks etc, and starts logging into SIMS to create the various reports) to the attempt to upload the file (.XML i think) - This is where it is failing.

 

Thanks.

[Steve21]

Then it depends how your proxy is setup really. As mentioned above is there any reason you don't bypass filtering on the SIMs box?

 

When you say you set it to run as a domain user, was this via the scheduled task/service etc? Or did you add this within xporter too under passwords? There's builtin config for proxy username/password without needing to change the service run as

 

Steve

[MYK-IT]

@Steve21

 

I had changed "Send to Meritec Username/Password" to that of our local SIMS account (called groupcall) and known working password.

 

Additionally I had changed the [log on] account for Xporter Service to a domain user when I though it may be a filtering issue (i have since disabled content filtering etc)

 

So not sure now! The "Send to Meritec Username/Password" is the local SIMS account credentials right??? and not meant to be specific credentials supplier by Meritec/CPOMS?

 

Sorry, not used this software in years...

 

Thanks

[Steve21]

No idea what that one is, that's normally one created by one of the companies you use that should be custom for them. e.g. Lets say your id for them is school1234 that's that etc.

 

There should be a proxy credentials ones too though (Proxy Sever Credentials) top of the list for me. Just above the normal SIMs login details.

 

Steve

[howartp]

So not sure now! The "Send to Meritec Username/Password" is the local SIMS account credentials right??? and not meant to be specific credentials supplier by Meritec/CPOMS?

Correct.

 

Our "Send to Meritec Username/Password" is set to groupcall, which is one of our SIMS accounts.

 

The groupcall server (we've various jobs which we run in one Xporter) is excluded from auth and subject to light filtering only.

[mrwoberts]

If the above filter/proxy suggestions aren't the solution then I'd definitely give GroupCall support a go, they were excellent when I had an issue; they may at least give you more insight into where the communication is failing.

[vikpaw]

@GREED may be able to advise ...

[GREED]

Sorry I am late to the party.

 

I would firstly advise you to contact Meritec as for the majority of Xporter partners they provide the initial support. Failing that, give our support line a ring we'll be happy to help.